$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142369.roa File: AS142369.roa (raw, json) Hash identifier: HTAAUTYZ1TwyeRlIOhioC5EykgwHkqs4vnuFcczkeCY= Subject key identifier: 63:F3:C2:CF:21:F1:CA:3B:83:35:1A:7A:8A:47:D6:80:19:4C:F6:90 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 67D51B572EBE4D303980B95601092483A40D0EA8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142369.roa Signing time: Tue 10 Dec 2024 05:00:10 +0000 ROA not before: Tue 10 Dec 2024 04:55:10 +0000 ROA not after: Tue 09 Dec 2025 05:00:10 +0000 asID: 142369 IP address blocks: 2001:df0:1740::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d5:1b:57:2e:be:4d:30:39:80:b9:56:01:09:24:83:a4:0d:0e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 10 04:55:10 2024 GMT Not After : Dec 9 05:00:10 2025 GMT Subject: CN=63F3C2CF21F1CA3B83351A7A8A47D680194CF690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:80:ce:08:45:45:42:49:fd:01:29:75:37: 6d:d1:f6:cd:df:7f:58:6a:68:e3:61:d0:61:69:be: c4:a4:42:63:af:eb:28:8d:79:85:23:ac:cf:d8:05: ff:10:db:ef:5c:e7:e9:01:8d:d7:b6:ae:6a:ac:26: 5a:65:5d:53:f5:df:f9:82:a1:61:a9:e2:73:c4:2b: 33:df:3b:31:26:be:f9:12:35:cb:b4:d1:51:d8:a7: 45:af:94:14:76:b8:df:c6:5e:d8:d3:5b:eb:f2:ba: b8:d9:3d:ed:2c:30:ad:07:ce:83:56:9d:08:50:48: 2f:75:3e:c2:73:c1:4f:c0:fa:17:ed:12:42:c8:4c: d3:84:c5:7b:66:79:15:21:2d:2f:bd:ab:1b:1b:f9: 45:b0:80:08:60:6a:89:cc:62:34:00:78:d1:29:4f: 94:b5:3a:4c:49:2c:f4:59:28:97:a8:ab:e9:f1:f3: 91:a0:dc:cf:d7:dc:a2:3e:59:62:1e:4a:a8:5b:41: fc:ea:d0:dc:bb:dd:db:d0:c5:fb:d4:61:80:12:c3: e8:c3:8b:d6:ef:cd:ab:c9:d8:82:69:13:21:bb:3d: 77:93:76:32:e1:57:8c:70:a7:67:87:48:e4:59:49: c8:05:56:5e:c6:87:c4:49:35:d5:5b:06:57:78:07: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F3:C2:CF:21:F1:CA:3B:83:35:1A:7A:8A:47:D6:80:19:4C:F6:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:1740::/48 Signature Algorithm: sha256WithRSAEncryption 2d:34:df:0e:a9:45:27:22:f8:a9:d0:cf:7b:cc:6a:00:39:4f: 3e:22:67:9e:9f:79:ff:82:ca:49:47:80:1c:28:ee:ca:ba:8d: 78:df:54:cf:1a:b8:45:99:95:5e:20:9b:a7:44:20:b8:5d:71: 4a:f6:f1:c0:e4:c0:ae:68:64:ca:b2:e6:5d:d1:f3:66:1e:4b: be:44:71:41:2b:f8:67:00:92:f7:69:57:a8:dd:0d:a8:2d:d5: 7c:91:9a:f0:5c:e0:80:0a:49:03:5f:04:86:ca:6b:1b:93:ac: c7:92:89:26:c4:76:43:86:08:57:f1:96:ec:b9:a0:65:bf:e0: 5b:39:35:36:9f:c7:a3:27:7c:6d:82:e7:18:8f:e8:38:4c:eb: a8:3a:9d:11:fb:7a:0c:da:37:52:76:5a:03:ab:3c:c1:cf:55: b0:5e:c6:a3:13:c7:80:d5:b0:d7:99:f7:29:16:b2:ac:43:82: 1f:dd:a5:d6:c1:d4:3f:65:d9:af:6c:66:dc:65:df:3f:ed:b3: fb:74:66:dd:b2:2e:dd:95:d2:a8:8b:1e:19:7b:c8:d2:e9:6d: 4f:a1:88:6b:02:6c:79:fc:fd:fc:e8:cf:52:94:b6:04:20:6e: 1f:74:b9:4c:18:33:f8:3c:64:86:71:b1:30:d2:1c:51:de:e1: b1:ca:99:4b -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUZ9UbVy6+TTA5gLlWAQkkg6QNDqgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxMFoX DTI1MTIwOTA1MDAxMFowMzExMC8GA1UEAxMoNjNGM0MyQ0YyMUYxQ0EzQjgzMzUx QTdBOEE0N0Q2ODAxOTRDRjY5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVwgM4IRUVCSf0BKXU3bdH2zd9/WGpo42HQYWm+xKRCY6/rKI15hSOsz9gF /xDb71zn6QGN17auaqwmWmVdU/Xf+YKhYanic8QrM987MSa++RI1y7TRUdinRa+U FHa438Ze2NNb6/K6uNk97SwwrQfOg1adCFBIL3U+wnPBT8D6F+0SQshM04TFe2Z5 FSEtL72rGxv5RbCACGBqicxiNAB40SlPlLU6TEks9Fkol6ir6fHzkaDcz9fcoj5Z Yh5KqFtB/OrQ3Lvd29DF+9RhgBLD6MOL1u/Nq8nYgmkTIbs9d5N2MuFXjHCnZ4dI 5FlJyAVWXsaHxEk11VsGV3gHuD8CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRj88LP IfHKO4M1GnqKR9aAGUz2kDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM2OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfAXQDANBgkqhkiG9w0BAQsFAAOCAQEALTTfDqlFJyL4qdDP e8xqADlPPiJnnp95/4LKSUeAHCjuyrqNeN9Uzxq4RZmVXiCbp0QguF1xSvbxwOTA rmhkyrLmXdHzZh5LvkRxQSv4ZwCS92lXqN0NqC3VfJGa8FzggApJA18EhsprG5Os x5KJJsR2Q4YIV/GW7LmgZb/gWzk1Np/Hoyd8bYLnGI/oOEzrqDqdEft6DNo3UnZa A6s8wc9VsF7GoxPHgNWw15n3KRayrEOCH92l1sHUP2XZr2xm3GXfP+2z+3Rm3bIu 3ZXSqIseGXvI0ultT6GIawJsefz9/OjPUpS2BCBuH3S5TBgz+DxkhnGxMNIcUd7h scqZSw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:19 2025 by rpki-client on console.sobornost.net